Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/M0tVy6uYHq6jqgC40RqmOtLK77c.roa
File: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (raw, json)
Hash identifier: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=
Subject key identifier: 33:4B:55:CB:AB:98:1E:AE:A3:AA:00:B8:D1:1A:A6:3A:D2:CA:EF:B7
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01942827149C28931FE42740375666762D1E
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/M0tVy6uYHq6jqgC40RqmOtLK77c.roa
Signing time: Thu 02 Jan 2025 17:53:57 +0000
ROA not before: Thu 02 Jan 2025 17:53:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136918
IP address blocks: 2a0e:46c4:2200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:14:9c:28:93:1f:e4:27:40:37:56:66:76:2d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=334b55cbab981eaea3aa00b8d11aa63ad2caefb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:aa:41:0a:08:f2:63:20:f2:2a:50:e6:fb:
0d:11:35:85:67:de:d3:a6:07:50:de:15:96:b1:44:
f6:0f:0c:60:26:6c:a6:54:f3:b7:f1:28:24:21:0e:
93:c2:93:2b:a6:b8:ac:92:39:c0:63:44:2b:2c:84:
c8:ca:2f:fb:90:e6:1f:b3:89:de:61:7c:7c:74:a3:
82:20:84:e6:27:77:38:39:53:20:7f:5e:07:af:2a:
2b:10:fc:32:5c:19:3f:6e:df:6f:b1:84:56:bc:51:
77:0a:8e:6c:05:2f:1b:28:65:d7:ff:05:ad:6c:63:
4d:0a:73:40:47:10:42:b8:f3:77:48:9b:a8:52:9e:
b4:29:20:0a:f7:f9:e8:62:df:c9:c4:cf:31:a7:db:
ed:21:4d:bc:53:84:e9:6d:cf:0c:3a:a4:6f:9a:23:
d1:5f:5b:27:a1:51:51:71:ef:4e:c6:d0:a8:68:fd:
3d:b0:91:84:e0:18:3f:56:27:ce:74:d1:95:3f:d0:
a3:ee:7d:a3:bb:26:1a:93:5c:1b:63:73:f1:ab:11:
ad:60:24:17:27:a7:07:81:4c:a7:33:72:09:4c:3c:
69:60:cc:f2:0b:24:a2:f6:55:7c:5c:d7:c6:49:9c:
82:32:e3:a7:38:34:cc:3b:1b:08:bb:cb:63:df:4c:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4B:55:CB:AB:98:1E:AE:A3:AA:00:B8:D1:1A:A6:3A:D2:CA:EF:B7
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/M0tVy6uYHq6jqgC40RqmOtLK77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2200::/40
Signature Algorithm: sha256WithRSAEncryption
45:7c:a2:2f:19:e9:0b:25:08:4d:99:8d:56:40:71:9a:cb:44:
5c:ad:0b:31:4c:29:a1:21:19:7b:88:e6:9d:52:a8:3d:de:01:
1c:cb:c0:2d:7a:84:c4:6e:fc:12:67:1a:27:9b:a1:af:74:af:
c9:41:8f:f5:af:e1:9b:05:3e:be:52:a6:03:1c:7e:7a:f7:07:
5e:2b:1b:96:43:16:e9:5c:4b:71:3c:60:aa:a8:9e:f9:16:ef:
48:b2:2c:61:b9:a9:79:dd:dd:39:2e:41:c8:60:8d:5f:28:5f:
42:27:6a:51:4c:e1:f3:fa:43:0f:32:39:0a:ac:d3:72:a9:61:
f9:2e:e7:28:76:7e:e7:a7:46:d8:42:db:3d:e4:a0:7d:cb:c4:
24:05:31:aa:9d:ae:03:c5:8e:74:a9:7e:13:fa:c8:39:53:9b:
fe:88:6c:f5:fa:31:ed:d9:95:30:3f:f4:63:9b:d5:cd:70:c1:
58:2d:db:4d:43:df:e7:87:0b:f9:85:7a:46:19:9d:aa:e7:97:
dc:0c:a8:57:3f:a6:98:f7:e4:96:9b:38:5b:30:09:b0:20:9d:
e2:42:81:10:55:2f:03:0e:9f:ab:5e:90:99:85:26:84:8d:11:
54:08:8c:8a:c1:86:60:91:75:2c:ba:28:25:16:af:8f:21:67:
e5:ac:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:04 2025 by rpki-client